PHP Vulnerability Responses by Company

RealVNC

Global cloud / infrastructure
Aliases / services
RealVNC / RealVNC Limited / RealVNC Connect / Remotable / vnc.com / remotable.com
Official website
https://www.realvnc.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Listed services and systems

Response status
Websites patched; Connect cloud unaffected
Response information checked
2026-10-25 Rechecked: 2026-10-27

Remote-access software and cloud services.

After early mitigations on realvnc.com, vnc.com and remotable.com, RealVNC confirmed hosting PHP fixes. Connect Portal and cloud-service servers do not use PHP.

This recheck could not revalidate all listed information against current official sources. The previous verification date is retained. Check official notices or support for current availability and required action.

What users should do

No customer action is required for this incident; contact RealVNC Support with questions.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://help.realvnc.com/hc/en-us/articles/40102145134749-CVE-2026-109618-CVE-2026-109619-PHP2Shell-VulnerabilityResponse evidence
  2. Operating entityhttps://www.realvnc.com/en/legal/Service and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments